Docs / YouSpot for developers and agents
YouSpot for developers and agents
What YouSpot exposes to code: an MCP server, OAuth 2.1, public profile endpoints, and the discovery files that describe them.
YouSpot is a personal CRM for AI-native professionals. It builds a second brain from the people, companies, notes and files you already deal with, syncing Gmail, Google Calendar, HubSpot, X and LinkedIn into one graph you can ask in plain English. One plan, $10 a month, no seats to count.
What you can call
- MCP server at
https://youspot.com/mcp: streamable HTTP transport, OAuth 2.1 with PKCE S256 and dynamic client registration. This is the primary way an agent reads and writes a member's CRM. - Public profile endpoints at
https://youspot.com/api/human/<username>(also.jsonand.md) andhttps://youspot.com/api/network/members: no auth, public data only. - Discovery files listed below, so a crawler or an agent can find all of the above without being told.
Discovery files
| Path | What it is |
|---|---|
/llms.txt | this site, for language models |
/llms-full.txt | the long-form version |
/sitemap.xml | every public page with a last-modified date |
/index.md | the home page as markdown |
/agents.md | what an agent can do here, in one page |
/mcp/v1 | streamable HTTP; initialize and tools/list need no credential |
/.well-known/mcp/server-card.json | the endpoint, transport and every tool |
/.well-known/mcp.json | every MCP server on this domain, each with its own card |
/auth.md | how an agent gets a credential |
/agent/identity | what identity you can hold here, and who you are holding |
/openapi.json | every HTTP endpoint that exists |
/plugin.json | both MCP servers and the skills, in one bundle |
/.well-known/ai-plugin.json | the OpenAI manifest, naming the OpenAPI spec, the OAuth endpoints and the logo |
/.well-known/api-catalog | RFC 9727 |
/v1 | every endpoint, and what each one costs in credentials |
/mcp/docs | the public pages over MCP, no credential at all |
/mcp/sandbox | the read tools over a demo account, no credential and no signup |
/sandbox | the sandbox described: what is mounted under /sandbox, and whether the demo account is seeded |
/ask | a question in plain words, answered from these pages |
/.well-known/agent-card.json | JSON-RPC at /a2a |
/.well-known/oauth-authorization-server | RFC 8414 |
/.well-known/oauth-protected-resource | RFC 9728 |
/.well-known/agent-skills/index.json | skills an agent can load |
/.well-known/ard.json | agent resource discovery |
/.well-known/ucp | what an agent can transact with here, and what it cannot |
/.well-known/security.txt | how to report a vulnerability |
/.well-known/http-message-signatures-directory | the key YouSpot agents sign their own requests with |
The CLI, the SDKs and the source
The official client is published under the YouSpot name in both ecosystems. Everything except calling a tool works with no credential, so either one is useful before anybody signs in.
npx youspot ask "how do I connect an MCP client"
npx youspot tools
pip install youspot
go get github.com/OnStartups/youspot-go| Where | What |
|---|---|
| MCP registry: com.youspot/youspot | the official Model Context Protocol registry entry, under a domain-verified namespace. |
| mcp.so: YouSpot MCP | the directory listing, with the live tool list fetched from this domain. |
| Smithery: youspot/youspot-mcp | the Smithery listing of the product server, OAuth 2.1, connectable from any Smithery client. |
| npm: youspot | the CLI and the JavaScript SDK. npx youspot ask "..." needs no credential. |
| npm: @youspot/mcp | the MCP server for clients that only speak stdio. npx @youspot/mcp bridges to /mcp/v1. |
| PyPI: youspot | the Python client. pip install youspot. |
| Go: github.com/OnStartups/youspot-go | the Go client, standard library only. go get github.com/OnStartups/youspot-go. |
| GitHub: OnStartups/youspot-agent-tools | source, the agent skills, AGENTS.md, .cursorrules and the Agent Plugins manifest. |
The repository carries AGENTS.md and .cursorrules for coding agents, an Agent Plugins manifest at plugin.json, and the three agent skills. It is the same source the packages are built from.
Reading pages as markdown
Every public page answers a markdown twin. Add .md to the path, or send Accept: text/markdown and get the same body back at the original URL.
curl https://youspot.com/pricing.md
curl -H "Accept: text/markdown" https://youspot.com/pricingWhere to go next
- Authentication: the OAuth 2.1 flow, and the API token a member can mint by hand.
- MCP: connecting Claude, ChatGPT, Cursor and Claude Code, and what the tools do.
- API: the HTTP surface that needs no MCP client.
- Security: how to report a vulnerability.